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REMARKS 



The August 7, 2007 Office Action was based upon pending Claims 1, 5, 7, 8, 12-14, 17, 
and 20. Claims 1, 5, 8, and 12 are amended by this paper and new Claims 21-24 are added. 
Thus, after entry of this amendment, Claims 1, 5, 7, 8, 12-14, 17, and 20-24 are pending and 
presented for further consideration. The Applicant notes that certain of the Claims are amended 
by this paper to clearly point out and distinctly claim what the Applicant regards as the invention. 
Claim 1 for example is amended to recite "A method of transferring data over a computer 
network from a network server to a client computer system, the method comprising: 

receiving a request by a requestor using a client computer system for data from at 

least one network server storing data, at least some of the data stored by the network 




server being encrypted; 

checking an attribute of the requested data to determine whether the requested 
data is encrypted with an encryption key , wherein the attribute is alterable by a network 




administrator ; 

if the requested data is encrypted with the encryption key, sending the encrypted 
data to the client computer system without data indicative of an associated decryption 



sending a message to the requestor indicating that the requested data is not 
encrypted with their key when the encryption key used to encrypt the requested data is not 
associated with the requestor; 

if the requested data is unencrypted, automatically retrieving the encryption key 
associated with the requestor from the client computer system and ; 

encrypting the requested data with the encryption key associated with the 
requestor automatically and without user intervention to create encrypted data; and 

sending the encrypted data to the client computer system without data indicative 
of the associated decryption key . 

In the Office Action, the Examiner rejects Claims 1, 5, 8, 12, 13, 17, and 20 under 35 
U.S.C. § 103(a) as being unpatentable over Hanna et al. (U.S. Patent No. 7,178,021) in view of 
Pond et al. (U.S. Patent No. 4,864,616) in view of Simmons et al. (U.S. Publication 
No. 2001/0039659) and further in view of Fan et al. (U.S. Patent No. 6,310,692). The Applicant 





key ; 
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has carefully reviewed the newly cited references and notes that Hanna et al. '021 describes 
methods and apparatus for utilizing a non-secure file server for storage and transmission of data 
in a secure manner among individual clients or groups of clients authorized access to the data. 
Hanna et al. further describes, for example, "the encrypted data and the encrypted first decryption 
key are forwarded from the first client to the file server for storage." The encrypted data is stored 
on the file server and the encrypted first decryption key is stored on the file server and an access 
control list associated with the encrypted data." Col. 1, 11. 58-62. "In response to a request to 
access the encrypted data, the file server returns the encrypted data and at least the applicable 
encrypted first encryption key needed to decrypt the data" (Col. 2, 11. 4-6). Hanna et al. further 
describes "the encrypted data and the encrypted first decryption key Kid along with a client or 
group identifier are forwarded over the network 10 by the client 12 C a for receipt by the file 
server 14." (Col. 4, 1. 67 — Col. 5, 1. 3). 

The Applicant thus notes that Hanna et al. describes a system supporting access to 
encrypted data to a plurality of clients who are a member of a defined group and, to facilitate this 
access, transmits encrypted data along with an encrypted decryption key. In contrast, the 
Applicant's claim includes sending encrypted data without data indicative of an associated 
decryption key. The Applicant further notes that Hanna et al. strongly teaches away from the 
Applicant's claimed invention by providing a system where multiple authorized users can have 
access to the same encrypted data by including decryption key information with encrypted data to 
which they have access. 

The Applicant has carefully reviewed the Pond et al. reference and notes that Pond et al. 
describe a method for cryptographically labeling electronically stored data as part of a security 
system for personal computers. Pond et al. describes encrypting data using two or more key 
streams and attaching a banner that is not encrypted but which announces that the associated file 
is protected. Pond et al. further describes that an Initialization Vector (IV) field of a label is 
filled with random bits. The random IV bits are used by the data ciphering processor to indicate 
a starting point for each key stream. In addition, the IV field may contain bits that indicate which 
of several reversible functions is to be used for encryption an decryption of the file and the 
direction in which the key streams are to be applied. Pond et al. further discloses that "much of 
the data necessary to decrypt an encrypted file is attached permanently to the file but is itself 
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encrypted" (Col. 4, 11. 17-19). Pond et al. further describes "four bit flags of the Key Mix 36 are 
used to designate which of the optional key streams 16, 22, 24, 26 are to be used to encrypt or 
decrypt the file. At least one of the key stream flags of the key mix 36 must be set or else the 
file will not be encrypted and the label 30 will not exist." (Col. 6, 11. 28-34). 

The Applicant thus notes that Pond et al. discloses sending encrypted data along with data 
indicating associated encryption/decryption parameters. Pond et al. emphasizes that the 
designated one or more key stream flags must be set or the file will not be encrypted. Thus, 
Pond et al. also strongly teaches away from the Applicant's claimed invention, for example, as 
recited in Claim 1 . 

The Applicant notes that Simmons et al. '659 describes a transaction system for 
transporting media files from content provider sources to palm entertainment devices. The 
Applicant notes, however, that Simmons et al. fails to teach or suggest sending a message to a 
requester indicating that requested data is not encrypted with their key when the encryption key 
used to encrypt the requested data is not associated with the requester. Simmons et al. also fails 
to teach or suggest that if requested data is unencrypted, automatically retrieving an encryption 
key associated with the requester from the client computer system. 

The Applicant notes that Fan et al. '692 describes a dynamic centralized printer resource 
management system to monitor printer resources and deliver warning messages to systems 
administrators, and users, and/or vendors when a printer resource falls below a predetermined 
threshold. The Applicant agrees that Fan et al. does describe that, for example, thresholds for 
any monitored printer resource set by a second new printer attribute 264 can be changed by a 
system administrator as indicated by the Examiner at Column 4, lines 35-36, as indicated by the 
Examiner. However, Fan et al. fails to describe or suggest encryption or decryption protocols. 

The Applicant thus respectfully notes that the combination of Hanna et al., Pond et al, 
Simmons et al., and Fan et al. fail to teach or suggest each and every element of the Applicant's 
claimed invention and the Applicant thus respectfully requests that the rejection of Claim 1 under 
35 U.S.C. § 103(a) in light of these references be withdrawn. While Claims 5 and 8 recite 
different specific limitations, they are likewise believed patentable over the Hanna et al, the 
Pond et al., the Simmons et al., and the Fan et al. references as well as the other art of record for 
similar reasons to those previously indicated with respect to Claim 1. The Applicant thus 

-8- 



Appl. No. 
Filed 



09/818,699 
March 27, 2001 



believes that the remaining base claims 5 and 8 are also patentable and respectfully request that 
the rejection under 35 U.S.C. § 103(a) be withdrawn. The Applicant further believes that the 
remaining base claims depending directly or indirectly from the corresponding base Claim 1,5, 
or 8 including the new Claims 21-24 properly further define the Applicant's claimed invention 
and are also patentable due at least in part to their dependence on the respective base claim. The 
Applicant thus believes that these claims are also patentable and respectfully requests prompt 
allowance of these claims. 

The Applicant notes that Eldridge et al. '721 describes methods and apparatus for 
updating password status for one or more servers in a client/server environment. Eldridge et al. 
further describes a key that may refer to any data or authentication information which is currently 
used by process to partake in an authentication protocol. For example, keys 308 may comprise a 
password itself, a one-way hash of a password, a public key corresponding to a private key 
derived from data including the password and others, however, Eldridge et al. fails to disclose or 
suggest the other limitations of the base claims and thus believes that Claims 7 and 14 are 
patentable under the requirements of 35 U.S.C. § 103(a) in light of Hanna et al., Pond et al., 
Simmons et al., Fan et al., and Eldridge et al., due at least in part to their dependence on the 
respective base claim. 

Co-Pending Applications o f Assignee 



Applicant wishes to draw the Examiner's attention to the following co-pending 
applications and issued patents of the present application's assignee. 



Serial 
Number 


Atty. Docket No. 


Title 


Filed 


11/452594 


MTIPAT.187C1 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


06/14/2006 


11/521163 


MTIPAT.187DV1 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


09/14/2006 


09/277482 


MTIPAT.075A 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


03/26/1999 


10/962997 


MTIPAT.075C1 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


10/12/2004 


11/524097 


MTIPAT.075C2 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


09/20/2006 
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09/277335 


MTIPAT.076A 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


03/26/1999 


11/503101 


MTIPAT.076C1 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


08/11/2006 



No Disclaimers or Disavowals 

Although the present communication may include alterations to the application or claims, 
or characterizations of claim scope or referenced art, the Applicants are not conceding in this 
application that previously pending claims are not patentable over the cited references. Rather, 
any alterations or characterizations are being made to facilitate expeditious prosecution of this 
application. The Applicants reserve the right to pursue at a later date any previously pending or 
other broader or narrower claims that capture any subject matter supported by the present 
disclosure, including subject matter found to be specifically disclaimed herein or by any prior 
prosecution. Accordingly, reviewers of this or any parent, child or related prosecution history 
shall not reasonably infer that the Applicants have made any disclaimers or disavowals of any 
subject matter supported by the present application. 
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SUMMARY 



In view of the foregoing, the present application is believed to be in condition for 
allowance, and such allowance is respectfully requested. If further issues remain to be resolved, 
the Examiner is cordially invited to contact the undersigned such that any remaining issues may 
be promptly resolved. 

Also, please charge any additional fees, including any fees for additional extension of 
time, or credit overpayment to Deposit Account No. 11-1410. 



Respectfully submitted, 



KNOBBE, MARTENS, OLSON & BEAR, LLP 



Dated: November 7, 2007 
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